Monitoring of computer network resources having service level objectives

ABSTRACT

In a typical computer network, at least some of the managed resources are monitored to determine whether those resources are meeting predetermined performance goals or service level objectives. To simplify the process of configuring a network monitor, information about the service level objectives is loaded into the resource itself. When the resource is detected, the service level objective information is extracted from the resource information and made available to a translating engine. The translating engine converts the extracted information to monitoring directions that are used to configure the network monitor. Embodiments in which new resources are detected either buying a registration process or a polling process are described.

BACKGROUND OF THE INVENTION

The present invention relates to computer networks and more particularlyto the real time monitoring of network resources that have performancegoals (service level objectives).

The term “network resource” is a term that should be interpreted broadlyenough to cover almost any hardware or software included in a computernetwork. The term includes, but is not limited to, special-purposehardware devices such as switches, routers, hubs, content servers,network storage devices, etc., including the control programs for suchhardware devices. The term also includes application programs thatexecute on either special-purpose or general purpose hardwarecomponents.

Some network resources are expected to meet certain performance goals orservice level objectives during their operation. A simple example of aservice level objective is that queries received from preferredcustomers must be responded to within two seconds. Typically, theperformance of managed network resources is tracked by a networkmonitor, itself another network resource to whom events occurring at amanaged network resource are reported. The network monitor is aware ofthe performance goals of the managed network resource and applies rulesto the reported events in order to determine whether the service levelobjectives of the managed resource are being met.

A network monitor is, of course, expected to monitor more than a singlenetwork resource. Dozens or even hundreds of network resources may bemonitored by a single network monitor. To keep track of the networkresources that it manages, a network monitor makes use of aconfiguration management database (CMDB), a repository that storesauthorized configurations of the managed network resources and therelationships among such resources. The network monitor may workdirectly with a configuration management database or indirectly with thedatabase through a higher level network manager that works with multiplenetwork monitors.

When a new network resource is added to a computer network, the networkmanager usually learns of the presence of the new resource in one of twoways. In one type of system, commonly called a registration system, thenew resource advertises its own presence by broadcasting one or moreregistration request messages. When a registration request message isreceived at a network manager, the manager takes the steps necessary tosee that the new resource is added to a list of managed resources and isassociated with a particular network monitor. In another type of system,commonly called a polling system, a network manager periodically sendsout polling messages that request information from devices receiving thepolling messages. A new device responds to a polling message by makingits presence known to the network manager.

While the presence of new resources in a computer network may beautomatically detected, the process of configuring those new resourcesis still largely a manual process performed by system administrators.Information about the resources, including any service level objectives,is obtained independently of the registration or polling process, andused to establish the configuration recorded in the configurationmanagement database.

SUMMARY OF THE INVENTION

The invention may be embodied as a method for monitoring a dataprocessing resource that is new to a computer network. After thepresence of the new resource is detected, operating goal policiesprovided by the resource are received. Resource monitoring policies arederived from the received resource goal policies. The new resource ismonitored in accordance with the derived resource monitoring policies.

The invention may also be embodied as a computer program product formonitoring a new resource in a computer network. The computer programproduct includes a computer usable medium having computer usable programcode. The program code is configured to detect the presence of the newlyadded resource, to receive operating goal policies from the resource andto derive resource monitoring policies from the received operating goalpolicies. The program code is also configured to monitor the newresource in accordance with the derived monitoring policies.

The invention may also be embodied as a computer network monitoringsystem for monitoring network resources, including a new resource. Themonitoring system includes a resource detector subsystem that detectsthe presence of a new resource and a receiving subsystem that receivesoperating goal policies from the new resource. A translation enginederives resource monitoring policies from the received operating goalpolicies. A monitoring subsystem then monitors the new resource usingthe derived resource monitoring policies.

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS

FIG. 1 is a pictorial representation of a computer network showing anetwork manager, network monitors and managed devices.

FIG. 2 is a block diagram of the hardware infrastructure for many of thedevices illustrated in FIG. 1.

FIG. 3 is a flow chart of operations that are performed in establishingmonitoring policies for a new resource in a registration-type system.

FIG. 4 is a flow chart of operations that are performed in establishingmonitoring policies for a new resource in a polling-type system.

FIG. 5 is a block diagram of a special-purpose device for implementingthe invention in a registration-type system.

FIG. 6 is a block diagram of a special-purpose device for implementingthe invention in a polling-type system.

DETAILED DESCRIPTION OF THE INVENTION

As will be appreciated by one skilled in the art, the present inventionmay be embodied as a method, system, or computer program product.Accordingly, the present invention may take the form of an entirelyhardware embodiment, an entirely software embodiment (includingfirmware, resident software, micro-code, etc.) or an embodimentcombining software and hardware aspects that may all generally bereferred to herein as a “circuit,” “module” or “system.” Furthermore,the present invention may take the form of a computer program product ona computer-usable storage medium having computer-usable program codeembodied in the medium.

Any suitable computer usable or computer readable medium may beutilized. The computer-usable or computer-readable medium may be, forexample but not limited to, an electronic, magnetic, optical,electromagnetic, infrared, or semiconductor system, apparatus, device,or propagation medium. More specific examples (a non-exhaustive list) ofthe computer-readable medium would include the following: an electricalconnection having one or more wires, a portable computer diskette, ahard disk, a random access memory (RAM), a read-only memory (ROM), anerasable programmable read-only memory (EPROM or Flash memory), anoptical fiber, a portable compact disc read-only memory (CD-ROM), anoptical storage device, a transmission media such as those supportingthe Internet or an intranet, or a magnetic storage device. Note that thecomputer-usable or computer-readable medium could even be paper oranother suitable medium upon which the program is printed, as theprogram can be electronically captured, via, for instance, opticalscanning of the paper or other medium, then compiled, interpreted, orotherwise processed in a suitable manner, if necessary, and then storedin a computer memory. In the context of this document, a computer-usableor computer-readable medium may be any medium that can contain, store,communicate, propagate, or transport the program for use by or inconnection with the instruction execution system, apparatus, or device.The computer-usable medium may include a propagated data signal with thecomputer-usable program code embodied therewith, either in baseband oras part of a carrier wave. The computer usable program code may betransmitted using any appropriate medium, including but not limited tothe Internet, wireline, optical fiber cable, RF, etc.

Computer program code for carrying out operations of the presentinvention may be written in an object oriented programming language suchas Java, Smalltalk, C++ or the like. However, the computer program codefor carrying out operations of the present invention may also be writtenin conventional procedural programming languages, such as the “C”programming language or similar programming languages. The program codemay execute entirely on the user's computer, partly on the user'scomputer, as a stand-alone software package, partly on the user'scomputer and partly on a remote computer or entirely on the remotecomputer or server. In the latter scenario, the remote computer may beconnected to the user's computer through a local area network (LAN) or awide area network (WAN), or the connection may be made to an externalcomputer (for example, through the Internet using an Internet ServiceProvider).

The present invention is described below with reference to flowchartillustrations and/or block diagrams of methods, apparatus (systems) andcomputer program products according to embodiments of the invention. Itwill be understood that each block of the flowchart illustrations and/orblock diagrams, and combinations of blocks in the flowchartillustrations and/or block diagrams, can be implemented by computerprogram instructions. These computer program instructions may beprovided to a processor of a general purpose computer, special purposecomputer, or other programmable data processing apparatus to produce amachine, such that the instructions, which execute via the processor ofthe computer or other programmable data processing apparatus, createmeans for implementing the functions/acts specified in the flowchartand/or block diagram block or blocks.

These computer program instructions may also be stored in acomputer-readable memory that can direct a computer or otherprogrammable data processing apparatus to function in a particularmanner, such that the instructions stored in the computer-readablememory produce an article of manufacture including instruction meanswhich implement the function/act specified in the flowchart and/or blockdiagram block or blocks.

The computer program instructions may also be loaded onto a computer orother programmable data processing apparatus to cause a series ofoperational steps to be performed on the computer or other programmableapparatus to produce a computer implemented process such that theinstructions which execute on the computer or other programmableapparatus provide steps for implementing the functions/acts specified inthe flowchart and/or block diagram block or blocks.

FIG. 1 is an overview of a simple computer network shown as managed by asingle network management system or network manager 10. The networkmanager 10 is linked to a CMDB or configuration management database 12that stores configuration information about each of the resources in thecomputer network. The network resources include network monitors 14 and16 that have the task of monitoring the performance of other resourcesin the computer network. Network monitor 14 is shown as havingdirectly-connected managed resources 16, 18, 20. Network monitor 16 isshown as being connected to a set of managed resources 22, 24, 26through a wide area network (WAN) 28.

The network representation is simplified for ease of illustration. Inreality, a computer network would have more network monitors and eachmonitor would be responsible for many more managed resources. Also,while the drawing shows the network monitors as separate hardwaredevices, the network monitors may actually be computer programapplications that run in the same or different hardware devices as thenetwork manager. Furthermore, while each of the managed resources 16,18, 20, 22, 24 and 26 is represented as a hardware device, the resourcemay actually be a computer application program running on ageneral-purpose computer device.

FIG. 2 is a block diagram of a hardware infrastructure that could beused for almost all of the devices previously mentioned. Theinfrastructure includes a system bus 30 that carries information anddata among a plurality of hardware subsystems including a processor 32used to execute program instructions received from a computerapplications running on the hardware. The infrastructure also includesrandom access memory (RAM) 34 that provides temporary storage forprogram instructions and data during execution of a computer applicationand read-only memory (ROM) 36 often used to store program instructionsrequired for proper operation of the device itself, as opposed toexecution of computer applications. Long-term storage of programs anddata is provided by high-capacity memory devices 38, such as magnetichard drives or optical CD or DVD drives.

In a typical computer system, a considerable number of input/outputdevices are connected to the system bus 30 through input/output adapters40. Commonly-used input/output devices include monitors, keyboards,pointing devices and printers. Increasingly, high-capacity memorydevices are being connected to the system through what might bedescribed as general purpose input/output adapters, such as USB orFireWire adapters. Finally, the computer system includes one or morenetwork adapters 42 that are used to connect the system to othercomputer systems through intervening computer networks of the typepreviously mentioned.

Referring momentarily back to FIG. 1, the network monitors 14 and 16generally monitor the performance of the managed resources. At leastsome of the managed resources may have service level objectives,performance goals that are expected to be met during system operation.For example, if a managed resource is a customer support application, aperformance goal for that application may be that any queries from apreferred class of customers will receive a response within x seconds ofreceiving the query.

The network monitor associated with the customer support applicationmust be configured to detect a query from a preferred customer and theresponse to that query from the customer support application. In knownsystems, the information required to configure the network monitor wasmade available to a system installer or system administrator who thenused the provided information to create monitoring policies for use bythe network monitor.

FIG. 3 is a flow chart of a process for automating the creation ofmonitoring policies required to determine whether a new managed resourceis meeting predetermined performance goals. It is assumed that thenetwork monitor is already monitoring other managed devices in anoperation 44 and will continue to do so until a registration request isreceived from a new resource in an operation 46. When the registrationrequest is received, the request itself may include information aboutthe requesting resource or the network monitor may query the resource toprovide the resource information. Both types of operations fall withinthe scope of step 48. A determination 50 is then made whether theresource information received directly from the new resource includesany policy goals of the type discussed earlier. Whether the resourceinformation itself includes policy goals, the network monitor checks thesystem database, the configuration management database, in step 52 todetermine whether the configuration management database already containsperformance goals for the type of resource being added to the computernetwork. Policy goals can also be stored outside the resource, forexample, in a database, and associated with the resource. Suchassociations can be made using standard linking techniques (such as URLsor URIs), or can be implicit based on tags. In one example of the lattercase, a tag such as “Linux” can be applied both to a server resource anda policy, and the association of that policy with the resource is madethrough the common tag. The mechanism of associating policies has noimpact on the translation of policy goals by the translation engine.

All performance goals, whether received from the new resource or fromthe configuration management database based on the type of the newresource, are sent to a translating engine in step 54. The function of atranslating engine is to convert the goals into the events that are tobe reported to the network monitor and into rules for processing thereported events. The events and the rules can be characterized asmonitoring directions that are provided to the network monitor by thetranslating engine in a step 56.

Once the network monitor is configured with monitoring directions forthe new resource, the system returns to performing normal networkmonitoring operation, including monitoring of the new resource todetermine whether it is meeting predetermined performance goals.

The description above is of the type of computer network in which newresources make their presence known by registering with the networkmonitor. FIG. 4 is a flow chart of operations that will occur in addingnew resources with performance goals to another known type of computersystem, a system in which a polling process is used to detectnewly-added resources. Again, it is assumed that the network monitor isalready performing network monitoring (operation 60). As part of thenormal network monitoring, the network monitor periodically polls orqueries the network to determine whether any resources have been addedto the network. Until an operation 62 indicates that it is time foranother poll, normal network monitoring operations 60 continue. At theappropriate time, the network is polled (operation 64) to identify newlyadded resources. If no new resources are detected in an operation 66,normal network monitoring 60 is resumed until it is time for the nextpoll.

Assuming new resources are found in the poll, one of the new resourcesis selected in step 68 and information is acquired from that resource instep 70. Any policy goals contained in the resource information arerequired in step 72. The system database is interrogated in step 74 todetermine whether it includes any additional policy goals for theselected resource type. All goals are sent to the translating engine instep 76 where they are converted to monitoring directions for thenetwork monitor. The monitoring directions are provided to the networkmonitor in step 78 and the check 80 is made as to whether the pollrevealed additional new resources. If there are additional new resourcesto be processed, the program loop beginning at operation 68 and endingan operation 80 is repeated for each new resource. Once all of the newresources have been processed in the network monitor has been configuredto monitor those resources, normal network monitoring resumes atoperation 60.

In one implementation of the present invention, the previously describedprocesses could be performed by a program executing in a programmable,general purpose computer system. Alternatively, the invention may beimplemented in a dedicated or special-purpose computer system in whichsome or all of the operations are performed using hardwired logic orfirmware.

FIG. 5 is a block diagram of a special-purpose monitoring system 100that could be used in implementing the invention in a registration-typesystem. The system 100 includes a number of subsystems including aresource monitoring subsystem 102 that monitors the performance of anumber of network resources 104, normally using information provided bya configuration management database 106 containing information about allof the managed network resources. The monitoring system 100 includes aresource detector subsystem 108 which receives information about newlyadded network resources. Once the newly added resource is detected,information about the resource is provided through a receiving subsystem110. Resource information received directly from a new resource throughreceiving subsystem 110 or indirectly from the configuration managementdatabase 106 based on the resource type is processed by translationengine 112 to derive monitoring directions for the newly added resource.A registration subsystem 114 oversees the process of deriving monitoringdirections and completes registration of the newly added resource.

FIG. 6 is a block diagram of another special purpose monitoring system118 that could be used to implement the invention in the type of networkin which new resources are discovered by a polling process. The system120 includes a resource monitoring subsystem 120, a translation engine122, a registration subsystem 124 and a receiving subsystem 126. Each ofthese components performs the functions already described with referenceto corresponding subsystems in FIG. 5. The system 120 also works with aconfiguration management database 128 that performs functions alreadydescribed. The system 120 includes a polling subsystem 130 thatperiodically polls the entire set of network resources 132 for any newlyadded resources.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof code, which comprises one or more executable instructions forimplementing the specified logical function(s). It should also be notedthat, in some alternative implementations, the functions noted in theblock may occur out of the order noted in the figures. For example, twoblocks shown in succession may, in fact, be executed substantiallyconcurrently, or the blocks may sometimes be executed in the reverseorder, depending upon the functionality involved. It will also be notedthat each block of the block diagrams and/or flowchart illustration, andcombinations of blocks in the block diagrams and/or flowchartillustration, can be implemented by special purpose hardware-basedsystems that perform the specified functions or acts, or combinations ofspecial purpose hardware and computer instructions.

The terminology used herein is for the purpose of describing particularembodiments only and is not intended to be limiting of the invention. Asused herein, the singular forms “a”, “an” and “the” are intended toinclude the plural forms as well, unless the context clearly indicatesotherwise. It will be further understood that the terms “comprises”and/or “comprising,” when used in this specification, specify thepresence of stated features, integers, steps, operations, elements,and/or components, but do not preclude the presence or addition of oneor more other features, integers, steps, operations, elements,components, and/or groups thereof.

The corresponding structures, materials, acts, and equivalents of allmeans or step plus function elements in the claims below are intended toinclude any structure, material, or act for performing the function incombination with other claimed elements as specifically claimed. Thedescription of the present invention has been presented for purposes ofillustration and description, but is not intended to be exhaustive orlimited to the invention in the form disclosed. Many modifications andvariations will be apparent to those of ordinary skill in the artwithout departing from the scope and spirit of the invention. Theembodiment was chosen and described in order to best explain theprinciples of the invention and the practical application, and to enableothers of ordinary skill in the art to understand the invention forvarious embodiments with various modifications as are suited to theparticular use contemplated.

Having thus described the invention of the present application in detailand by reference to preferred embodiments thereof, it will be apparentthat modifications and variations are possible without departing fromthe scope of the invention defined in the appended claims.

1. A method for monitoring a data processing resource that is newlyadded to a computer network, said method comprising: detecting thepresence of the newly added resource; receiving operating goal policies,received from the newly added resource; deriving resource monitoringpolicies from the received operating goal policies; and monitoring thenewly added resource in accordance with the derived resource monitoringpolicies.
 2. A method according to claim 1 wherein deriving resourcemonitoring policies from the operating goal policies received from thenewly added resource further comprises establishing events that are tobe detected during monitoring of the newly added resource.
 3. A methodaccording to claim 2 further comprising: receiving operating goalpolicies from an additional source other than the newly added resource;and deriving resource monitoring policies for the newly added resourcefrom the operating goals received from the additional source other thanthe newly added resource.
 4. A method according to claim 2 whereinmonitoring the newly added resource in accordance with the derivedresource monitoring policies further comprises generating a warning ifthe occurrence of a monitored event is anticipated.
 5. A methodaccording to claim 3 wherein monitoring the newly added resource inaccordance with the derived resource monitoring policies furthercomprises generating a warning if the occurrence of a monitored event isanticipated.
 6. A method according to claim 2 wherein detecting thepresence of the newly added resource further comprises: receiving aregistration request from the newly added resource; and establishing amonitoring relationship with the newly added resource.
 7. A methodaccording to claim 3 wherein detecting the presence of the newly addedresource further comprises: discovering the existence of the newly addedresource during a poll of network resources; and establishing amonitoring relationship with the newly added resource.
 8. A computerprogram product for monitoring a data processing resource that is newlyadded to a computer network, the computer program product comprising acomputer usable medium having computer usable program code embodiedtherewith, the computer usable program code comprising: computer usableprogram code configured to detect the presence of the newly addedresource; computer usable program code configured to receive operatinggoal policies from the newly added resource; computer usable programcode configured to derive resource monitoring policies from theoperating goal policies received from the newly added resource; andcomputer usable program code configured to monitor the newly addedresource in accordance with the derived resource monitoring policies. 9.A computer program product according to claim 8 wherein the computerusable program code configured to derive resource monitoring policiesfrom the operating goal policies received from the newly added resourcefurther comprises computer usable program code configured to establishevents that are to be detected during monitoring of the newly addedresource.
 10. A computer program product according to claim 9 furthercomprising: computer usable program code configured to receive operatinggoal policies from an additional source other than the newly addedresource; and computer usable program code configured to derive resourcemonitoring policies for the newly added resource from the operatinggoals received from the additional source other than the newly addedresource.
 11. A computer program product according to claim 9 whereinthe computer usable program code configured to monitor the newly addedresource in accordance with the derived resource monitoring policiesfurther comprises computer usable program code configured to generate awarning if the occurrence of a monitored event is anticipated.
 12. Acomputer program product according to claim 10 wherein the computerusable code configured to monitor the newly added resource in accordancewith the derived resource monitoring policies further comprises computerusable program code configured to generate a warning if the occurrenceof a monitored event is anticipated.
 13. A computer program productaccording to claim 9 wherein the computer usable code configured todetect the presence of the newly added resource further comprises:computer usable code configured to receive a registration request fromthe newly added resource; and computer usable code configured toestablish a monitoring relationship with the newly added resource.
 14. Acomputer program product according to claim 10 wherein the computerusable code configured to detect the presence of the newly addedresource further comprises: computer usable code configured to discoverthe existence of the newly added resource during a poll of networkresources; and computer usable code configured to establish a monitoringrelationship with the newly added resource.
 15. A computer networkmonitoring system for monitoring a data processing resource that isnewly added to the computer network, said computer network monitoringsystem comprising: a resource detector subsystem for detecting thepresence of the newly added resource in the computer network; areceiving subsystem for receiving operating goal policies from the newlyadded resource; a translation engine for deriving resource monitoringpolicies from the operating goal policies received from the newly addedresource; and a resource monitoring subsystem for monitoring the newlyadded resource in accordance with the derived resource monitoringpolicies.
 16. A computer network monitoring system according to claim 15wherein the resource monitoring policies derived from the operating goalpolicies received from the newly added resource comprises events thatare to be detected during monitoring of the newly added resource.
 17. Acomputer network monitoring system according to claim 16 wherein thereceiving subsystem receives operating goal policies from an additionalsource other than the newly added resource and the translation enginederives resource monitoring policies for the newly added resource fromthe operating goals received from the additional source other than thenewly added resource.
 18. A computer network monitoring system accordingto claim 15 wherein the resource monitoring subsystem for monitoring thenewly added resource in accordance with the derived resource monitoringpolicies generates a warning if the occurrence of a monitored event isanticipated.
 19. A computer network monitoring system according to claim16 wherein the resource detector subsystem for detecting the presence ofthe newly added resource in the computer network further comprises: aregistration subsystem for receiving a registration request from thenewly added resource; and a monitoring control subsystem forestablishing a monitoring relationship with the newly added resource.20. A computer network monitoring system according to claim 16 whereinthe resource detector subsystem for detecting the presence of the newlyadded resource in the computer network further comprises: a pollingsubsystem for periodically polling computer network resources todiscover newly added resources; and a monitoring control subsystem forestablishing a monitoring relationship with the newly added resource.